19 



J 



Europfiiaches Patentamt 
European Patent Office 
Office europ6en dee brevets 





(u) Publication number: 0 632 371 A1 
EUROPEAN PATENT APPLICATION 



@ Application number : 94303808.3 
@ Date of filing : 26.05.94 



® mt. ci. 6 : G06F9/44 



© Priority : 28.05.93 US 68336 

@ Date of publication of application : 
04.01.95 Bulletin 95/01 

@ Designated Contracting States : 
DE FR GB 

© Applicant : XEROX CORPORATION 
Xerox Square 

Rochester New York 14644 (US) 

© Inventor : Sonty, Atashl C. 
16 Merry hill Lane 
Plttsford, New York 14534 (US) 
Inventor : Faria, Jose A. 
82 Riverferry Way 
Rochester, New York 14608 (US) 



Inventor : Wlllett, Alan W. 
229 Unden street 
Rochester, New York 14620 (US) 
Inventor : Clulla, Kim P. 
150 Amann Road 

Honcoye Falls, New York 14472 (US) 
Inventor : Comparetta, Christopher 
19 Squire Lane 

Plttsford, New york 14534 (US) 
Inventor : Latone, Jack T. 
1302 Flynn Road 
Rochester, New York 14612 (US) 

@ Representative : Johnson, Reginald George et 
al 

Rank Xerox Ltd 
Patent Department 
Parkway 

Marlow Buckinghamshire SL7 1YL (GB) 



CO 

CM 
CO 
CO 



CL 
UJ 



(g) Process for configuration management 

© In a process for ensuring compatibility of 
components in a system, system components 
are defined and relationships between two or 
more system components identified. From rela- 
tionships between components, inter-relation- 
ships between these identified relationships 
and possibly other components are determined. 
By validating integrity of either or both of the 
identified relationship and determined inter- re- 
lationship and, based on a validating result, 
ensuring integrity of the identified relationship 
or determined inter-relationship, compatibility 
of the components in the system is ensured. 
This process is particularly useful in eliminating 
incompatibilities between resident and mig- 
rations! software in an automated computer 
system. 
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The invention relates to a process for ensuring compatibility between components of a computer process- 
ing system, particularly for ensuring the integrity of a system configuration, even if enhancements to one sys- 
tem component render it incompatible with another component. 

Modern industrial manufacturing techniques make use of a known practice of manufacturing products 

5 made of many separate components, the components manufactured individually and later assembled into a 
finished article. This practice permits one component of the article to be modified without substantially altering 
the entire manufacturing process, and capitalizes on the efficiencies of compartmentalization. 

Using such component manufacturing practices, modifications made to a single component to enhance 
its performance or implement innovative technology not previously available, facilitate continuing product de- 

10 velopment without compromising production output of an existing product. These component manufacturing 
practices permeate the information and computer processing industries. 

Specifically, with the acvent of the computer age, such "component - designs proved essential in devel- 
oping commercial automated computing systems, which necessarily underwent hardware and software en- 
hancements to capitalize on new, previously undeveloped hardware and software technology. But for the abil- 

15 ity of the computer industry to apply these traditional component development practices for larger, complex 
systems, the rapid, widespread success of the modern computer system would likely not have occurred. 
Throughout the design, development and implementation of computer systems, maintenance of an operational, 
yet dynamic, system configuration is instrumental in successfully developing and maintaining a system of in- 
tegrated data processing components, e.g., central processors, printers, software applications and peripher- 

20 als. Thus, effective configuration management of these components and their operational relationships be- 
tween components becomes a vital requirement of the data processing industry. 

Early configuration management requirements were satisfied by crude, often error-prone methods. In 
these early systems, to ma. age, for example, untested software applications, system engineers generally es- 
tablish multiple, isolated an : separate environments (sometimes on separate disk storage units of a central 

25 processor), which are esse dally complete, stand alone versions of an entire system application. Enhanced 
system applications, which i f ten include necessary data "files", are migrated to one or more of these separate 
"environments", depending -na development step next required. When all components are migrated to an en- 
vironment and sufficiently U ited, a new software "baseline" using a particular environment is established. The 
"baseline" usually is a resu. of physically copying relevant data files. The baseline copy is then installed on 

30 other existing or new compt er systems. Software versions and releases developed by this conventional proc- 
ess are often manually copi d by a system operator from tape to disk, or other storage media in file sets from 
a defined baseline. 

Unfortunately, because the design, implementation and testing phases of component development are 
typically of such long duratic i, by the time a software release is delivered to a production environment, system 
35 changes, occurring during a mponent development necessitate that subsequent changes be manually migrat- 
ed, independent of a baselir j release. As one might expect, as the number of changes increases, complexity 
of managing the release insolation increases proportionally. What should be a simple environment migration 
(copying of data files) insteiJ, is an involved, labor intensive process to ensure the integrity of a system con- 
figuration. 

40 in conventional configuration management, manual installation of modified components to a stabilized 
configuration demands specialized user knowledge of the configuration. For example, if a software change, 
applied to a stabilized confi juration corrects a problem affecting system operating parameters, the change 
would not take effect until th j processor had been "rebooted." In addition, a component modification, intended 
to correct one problem, ma> introduce other errors if improperly installed. Without knowledge of the environ- 

45 ment and system configuration, an operator cannot ensure the integrity of a configuration. 

Conventional configure;. on management methods also maintain little historical data on an operating sys- 
tem configuration.: Using such methods, debugging errors is difficult. The system does not maintain data es- 
tablishing which system con iguration existed at point of system failure, often making error identification, iso- 
lation, recreation and resolu ion difficult or impossible. 

50 Information system prof ssionals have made numerous attempts to improve and streamline software con- 
figuration management Ont. such effort includes a software tool capable of automated installation or removal 
of software components fro. ,i any defined configuration. Although this automated system addresses many of 
the drawbacks in previous configuration management methods, it is limited to providing a set of written manual 
instructions and procedures for one of three types of actions: 1) replace a resident file version with a new file 

55 version; 2) add new files to tt -a system; and 3) entirely remove resident files from the system, without replacing 
them with now versions. (Sej Murtha, Amy J. ( The Development of a Configuration Control Tool," Electronic 
Systems Group, Westingho.,se Electric Corporation (August 1991). This automated configuration manage- 
ment system, although faciUating configuration management, functionally only installs and de-installs soft- 
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ware files. The system is a file manager and is capable of identifying a file version and acting on a file version 
based on an SWC ("software change"). The system only maintains information about a specific file related to 
an SWC and provides no functional information about relationships of the files to other system components 
(e.g., hardware and operating software). 
5 Other efforts to address problems associated with conventional configuration management have focused 

on procedures and mechanisms for isolating software development environments. One such proposal, Soft- 
ware Configuration Environment ("SCE") maintenance, involves establishing a set of individual environments, 
procedures and tools for a specific configuration. In this system, for each product release, one self-contained 
environment is created per phase and the different phases placed in a horizontal pipeline. Each environment 
10 is designed to be a self-contained set of files under control of a Source Code Control Systems (SCCS). See 
Baneijee, B„ "Implementation of a Software Configuration Environment," Switching Systems Division, Rock- 
well International Corporation (July 1990). 

In this system, each product release is designed to be composed of all entities in the corresponding pipeline 
and each new release is an extension of a previous release. Additionally, two, interconnected databases track 
15 user level change requests and problem reports and maintain records of resulting fixes in documents and code. 
This configuration management design merely maintains information about an environment dedicated to 
a specific version or release. It affords no assistance in identifying, validating and verifying integrity of the 
system's configuration for non-determinative updates to components in a computer processing system. Al- 
though it contains information tracking requests for changes to system functions or to correct processing errors 
20 in the application logic, once changes are made in one of the many individual environments, a complete new 
version of all entities in the horizontal pipeline is required. System operators cannot determine whether a new 
release will result in a product release incompatible with resident software or hardware until after the new re- 
lease has been dynamically tested by users in that environment Such a result exposes system developers to 
allegations of poor testing and development practices and often equates to significant computer downtime. 
25 Although the disclosed software configuration environment eliminates some of the above-mentioned draw 
backs, it requires that system operators have a detailed knowledge of the functional application to organize 
and bundle the system packages. In addition, no method for ensuring that all system components are contained 
in a particular system configuration is provided. 

Nor does the disclosed procedure address configuration management of non-determinative replacement, 
substitution, addition or removal of a component subset of a system configuration. It manages the configuration 
as a whole unit. In non-determinative configuration management, as is true of conventional methods discussed 
above, if a change to a single system component requires installation or replacement of a complete copy of 
the resident software, system maintenance costs rise higher proportionately. 

The introduction of networks and decentralized processing environments adds a significant level of com- 
plexity to managing system configurations across distributed systems. In distributed architectures, system 
components are not confined to a single, isolated processing environment. Compatibility of system compo- 
nents and integrity of the environment require verifying compatibility and ensuring integrity across multiple 
environments running on various processing platforms. 

Work station technology, networks and client-server architectures introduce additional complexities in 
40 configuration management The cooperative nature of these distributed system architectures, having multiple 
remote locations with each location operating independently of another location and having separate system 
configurations, presented skilled artisans with complex, unresolved configuration management issues. 

In an attempt to address these new issues in configuration management, presented by the more contem- 
porary distributed computer processing systems, Dean et al. developed a procedure for classifying areas sut>- 
45 ject to and amenable to automated computer support. In their distributed system, configuration and structure 
of the distributed system modeled is described by defining structures, relations and components of a distrib- 
uted system. 

Conceptually, one approach to configuration management in the distributed process environment records 
and maintains information about a specific distributed configuration, without enforcing rigid configuration con- 
so trol policies. Once the information is recorded, a consistency checker might examine the recorded information 
to highlight system irregularities. See Dean et al., "Cooperation and Configuration Within Distributed Systems 
Management," Computing Department, Lancaster University (March 1992). 

Such a configuration management system fails to provide a method for maintaining a system environment 
subject to non-determinative changes in configuration. The disclosed method lacks a process for establishing 
predetermined dependencies prior to performing any maintenance operation. In the disclosed system, config- 
uration and dependency information is merely recorded and subsequently examined. Before or after system 
maintenance, integrity of the configuration is not validated. 

Another attempt to resolve many of the problems inherent in contemporary heterogeneous platforms ad- 
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dressed disadvantages of multi-dimensional platforms. See Perin, "Configuration & Software Distribution in 
Maintenance Environments on Heterogeneous Platforms," Olivetti Information Services (August 1991). Perin 
describes a procedure for maintaining a system operating at various user locations in which the systems have 
quite different configurations. The procedure establishes a centralized system for identifying, resolving and 

5 implementing modifications to an existing application or hardware system. The discussed procedure utilizes 
conventional methods for managing a defined configuration. Separate established environments contain iso- 
lated operating environments for maintenance, testing and release of updated software versions and releases. 

Each environment provides a specific set of support functions depending on an intended use for an en- 
vironment e.g., ( 1) developing and testing, 2) testing only or 3) releasing. This procedure provides only for iden- 

10 tifying, documenting and resolving errors in a production system. Perin does not discuss a procedure for main- 
taining the integrity of a system configuration to prevent errors introduced into a user environment during in- 
terface of a remote application with a central processor or upgrading/downgrading of a remote location, inde- 
pendent of a shared location. 

In yet another configuration management alternative, Maymon discusses a systematic set of modeling 

is tools used in conjunction with object-oriented modeling techniques to identify and classify subscriber service 
objects managed by a management information base (MIB), operating under a network switching element 
(NSE). See Mayman, "An Information Model for Configuration Management of Switching Network Elements, 
Using OSI Tools," Bellcore (March 1991). The memory administration information model presented and dis- 
cussed in Maymon is a conceptual illustration of groupings of various data elements within the service MIB 

20 of the NSE. Mayman discusses a managed object class as an identified grouping of managed objects which 
share certain characteristics, each class containing a number of attributes whose values define the service 
profile of ea zh managed object Composite managed objects result from containment (aggregation) of superior 
and subordinate managed object classes. 

The dit dosed tools and techniques define objects required to provide a customer a subscribed-for tele- 

25 communication service. The system is limited to defining objects required to provide subscriber services. A 
disclosed operating system retrieves attribute and other relevant information about the managed objects. The 
disclosed s /stem is a roadmap for the objects managed by an operating system If an object managed by the 
operating s /stem changes, the information model also changes. The disclosed system is not capable of dy- 
namically verifying and ensuring that an object is or is not required to provide a specific service. 

30 An object of the present invention is to overcome the limitations of conventional methods. Accordingly, the 
present invention provides a process as defined in any one of the appended claims. 

The process provides a universal process for ensuring the compatibility of components in a system, par- 
ticularly in s. /stems having many components which undergo non-determinative enhancement. In the inventive 
process, system components are first defined. After defining relevant system components, compatibility re- 

35 lationships jetween two or more system components are identified. From these identified compatibility rela- 
tionships, inter-relationships between at least two compatibility relationships are determined. 

The compatibility relationships and inter-relationships may be assigned a dedicated control field, thus 
uniquely identifying each relationship and inter-relationship identified. Once the relationships and inter-rela- 
tionships ar 3 identified, validating integrity of the compatibility relationship and/or inter-relationship and, based 

40 on a valida.ing result, and maintaining integrity of the compatibility relationships and inter-relationships de- 
fined, ensu: e compatibility of system components in a system configuration. 

Maintaining integrity of the compatibility may include taking one or more corrective actions to re-establish 
the integrity of the compatibility relationship or inter-relationship. 

In one embodiment the process comprises the step of verifying integrity occurs before at least one oper- 

45 ation selectad from the group consisting of a partial or complete system installation, partial or complete system 
downgrade and partial or complete system upgrade. 

In another embodiment of the process at least one of the hardware, software applications and software 
languages are selected from more than one version. Each corresponding version may comprise at least one 
release. 

so In yet a further embodiment the step of validating integrity occurs before and after the at least one system 
installation, downgrade or upgrade. 

The present invention will be described further, by way of examples, with reference to the accompanying 
drawings, in which:- 

Fig. 1 is a State Diagram in an embodiment of a configuration management system according to an en> 
55 bodiment of the invention, 

Fig. 2 is a representative high-level process flow diagram for a full software upgrade function, 
Fig. 3 b a schematic representation of the system architecture for a data processing system using an ex- 
emplary configuration management system, 
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Fig. 4 is a data flow diagram for the configuration management (CM) application, represented in Fig 2, 

Fig. 5 is a data flow diagram for the CM application for a partial software upgrade, 

Fig. 6 is a representative high-level process flow diagram for a language upgrade to the data processing 

system illustrated in Fig. 3, and 
5 Fig. 7 is a data flow diagram for the CM application for a language upgrade. 

The present invention addresses and eliminates the drawbacks of conventional configuration management 
methods for automated computing systems by defining components of the system subject to redesign, modi- 
fication, removal or replacement in a system to which non-determinative modifications occur. Representative 
system components may include hardware, software applications and userlanguages. Once the relevant com- 
10 ponents are defined, relationships between two or more computing system components are identified. An ex- 
emplary relationship might include, but is not limited to, identif ied compatibility between a software application 
controlling printing of landscape document images and a particular printer model which provides landscape 
printing. In this example, the defined components are a 1) software application, and 2) printer. Afunctional 
relationship requires that the software application operate a specified landscape option. 
is Identifying relationships necessarily results in relationships between two or more relationships or between 
a relationship and one or more components, hereinafter referred to as inter-relationships. Determining inter- 
relationships in the process according to the invention completes a configuration definition. The defined con- 
figuration is a basis for dynamically managing a system configuration. 

Managing the configuration includes validating integrity of a relationship or inter-relationship and based 
20 on a validating result, maintaining integrity of a defined configuration, having relationships and inter-relation- 
ships, and thus ensuring compatibility of system components in the configuration. Configuration maintenance 
may include, but is not limited to, notifying appropriate system operators of a relationship or inter-relationship 
inconsistency or taking corrective action to re-establish integrity of the configuration. A representative correc- 
tive action may include restoring a specified component to a previous condition or status, upon system detec- 
ts tion of an error in a pre-determined relationship. 

Ensuring integrity of the defined system configuration may occur at various, pre-selected times. For ex- 
ample, verifying and maintaining defined configuration relationships and inter-relationships may occur when 
a new system component is installed. Adding a newf ixed disk drive requiring enhanced-f unction operating soft- 
ware exposes a defined system configuration to a potential operating error if the relationship of the compo- 
ao nents are not verified. Thus, verifying and maintaining the integrity of the configuration is necessary after up- 
grading the disk drive. Subsequent verification and maintenance checkpoints may be required depending on 
the significance of the relationship to be validated and impact to the system if a relationship becomes corrupted 
between checkpoints. Other exemplary opportunities for verification of configuration integrity include 1) after 
an initial installation of a complete system, 2) installation of one or more components in a system, 3) a partial 
35 or complete downgrade of one or more system components (e.g., such as a hardware device or software ap- 
plication) to a previous version of a system component, or 4) a partial or complete upgrade of one or more sys- 
tem components to a later component version. 

The process according to the invention is particularly useful when non-determinative changes occur to 
one or more components in the system, especially when the defined configuration includes components of 
40 different versions, and even more so when the components defined to the configuration are different releases. 

Many problems of conventional configuration management systems arise because insufficient information 
is maintained about a defined configuration during operation. The present invention overcomes this drawback 
of conventional methods, by optionally maintaining status information aboutthe state of a defined configuration 
during specific periods, between pre-determined checkpoints. In a preferred method for recording such infor- 
ms mation, maintenance of configuration integrity includes writing data to a computer log. Such information may 
preferably be utilized in subsequent integrity validations to eliminate redundant validation processing. 

A preferred embodiment of the inventive method is useful in eliminating incompatibilities between resident 
software on the computer system and migration software. This preferred method comprises defining resident 
software and migrations software components used in the computer system, identifying compatibility reia- 
so tionships between a first resident software and at least one of a second resident software or migrational soft- 
ware and determining compatibility inter-relationships between at least one compatibility relationship and at 
least one resident software, migrational software or another compatibility relationship. A dedicated control field 
is assigned to each compatibility relationship or compatibility inter-relationship and stored. Storing the dedi- 
cated control field permits subsequent automated retrieval of the control field for use in periodic integrity va- 
55 lidation. Then, prior to performing a computer operation, e.g., a hardware reconfiguration, software upgrade 
or user language redefinition, the integrity of the computer system is validated by identifying system incom- 
patibilities. 

Finally, incompatibilities identified in the integrity validation are eliminated. Although alternatives exist for 
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identifying incompatibilities, a preferred method reads migrational software and resident software identifica- 
tion data, verifies compatibility between resident software and migrational software by comparing current con- 
figuration data against the dedicated control field, and upon verification, updates current configuration data 
for the migrational software, now "new" resident software, in the computer system. Preferable computer op- 
5 orations are not limited to migrational software installation, but may include a software upgrade or downgrade. 

Integrity validation in which incompatibilities are identified may occur subsequent to performing a com- 
puter operation, and in resp onse to an identified incompatibility, integrity of the original configuration may be 
maintained by restoring prior resident software to a previous, verified configuration. 

An embodiment of the present invention is illustrated by the following non-limiting examples: 

10 

Example 1 

In an example of a configuration management system, a commercially available computerized document 
production facility has a variety of devices and applications, combined in multiple configurations over a range 
15 of version levels with a variety of enabled features. In order to ensure proper combination of the hardware, 
software and other components of the document production system, the configuration management system 
coordinates proper combination of components, including the version and release levels, against enabled sys- 
tem feature sets. 

In this example, the document production facility consists of components as represented in Fig. 3. The 
20 system core is comprised o a central processor unit (CPU) A. The central processor contains permanent disk 
storage devices containing operational and other system parameter data, such as data stored in Programmable 
Read Only Memory Storage (PROMS) J and K. Other data, e g. boot-up data and operating system logs are 
stored on disk storage devices in the central processor. 

The document production system application, running on the processor invokes one of numerous appli- 
25 cation modules D stored o devices in the processor. A document scanner G scans external data from docu- 
ments. Scanned data rem ins in disk storage managed by the processor. Printing devices E and F are com- 
ponents of the document p oduction facility and may be invoked by specific functions performed by the proc- 
essor or application moduK s. Designated application modules D, stored on central processor A provide a user 
interface H for interfacing < /ith system users. 
30 A tape device B provic :s for loading and backup of software applications, loading of font data, backup of 
system information from th i processor or loading from a tape I, containing data or software L, to the processor 
or storage devices. 

In the configuration m nagement system for this document production facility, a configuration manage- 
ment state diagram is illus rated by Fig. 1. Prior to an initial installation of the document production system 

35 101, the system paramete: files, e.g., J and K, are built, 100. During initial installation, 101, configuration of 
an electronic sub-system c xurs. Upon completion of an initial installation, software applications and default 
document production facilt y languages are defined to the system, 102. From a language tape, using tape i 
(Fig. 3), primary and secor dary languages are initially loaded onto the central processor, 103. 

The installed documer : production facility becomes the current configuration, having established hard- 

40 ware components, a partici iar software version and release for installed applications and designated user lan- 
guages, and is designatea as such, 104. Upon obtaining an initially configured system, system PROMS are 
updated and retain current configuration information for subsequent use in validating integrity of the system 
configuration, 106. 

During the operational ife cycle of the illustrated configuration management system, modifications to ap- 
45 plication software, designa ed user languages or system hardware necessarily result in system upgrades and 
downgrades. In the applies ion, CM (configuration management, 200) functions as a controlling module, per- 
forming one of various sysi jm maintenance operations, e.g., upgrading or downgrading document production 
system components, Fig. 2. Upon upgrading or downgrading specific system components, the system PROMS 
are updated by the Real T me Operating System (RTOS), 201, to reflect the modified current configuration 
50 along with configuration status output to Dialog, 202. Subsequent to completion of an upgrade or downgrade 
operation, verification of th 3 environment integrity occurs. 

In the exemplary confi juration management system, the application CM, illustrated in greater functional 
detail in Figs. 4-7, dynamically manages a system configuration throughout the various configuration states 
which may exist during the tfe cycle of the document production system. Each system component of a current 
55 configuration of the docurr jnt production facility is recorded on disk storage or PROMS. Relationships and 
inter-relationships required :o verify and maintain the integrity of the system are provided in data fields and/or 
functional application proc ssing. The data fields are encoded control fields identifying the compatibility of 
one system component (e j., software application) with another system component (e.g., printing device). 
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Through functional application processing, or manual validation, integrity of any possible configuration of the 
components is ensured. Table I illustrates representative relationship and inter-relationship control data fields 
in the document production facility. 



TABLE I 
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Date Type Designation 
Product Software Component 
Configuration ZZ 



SW-Language 
Compatibility 



LL, FF 



Storage Location Description 



CONFIG 
Textfile 



SW-Diag Utility BB 
25 Tape Compatibility 



CONFIG 



Product Family, e.g., 1 
E, 2 = Printer F, etc. 



Printer 



LL increments when language 
and software items have 
cnanges that are not 
compatible. 

FF increments when there is a 
change to a language item 
which affects the function of 
the item. 

Compatibility number for 
Diagnostic Utility Tape 
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Product SW 
Feature Level 



Language Feature 
Level 



"50 Characters" Textfile 



'50 Characters" Textfile 



Language Component 
Configuration ZZ 



SW-Language 
Compatibility 



LL, FF 



Language Feature 
Level 



Diagnostic Utility Component 



Con-figuration 

TABLE I (cont'd) 

SW-Diag Utility 
Tape Compatibility 

Diagnostic Utility 
Tape Feature Level 



ZZ 
BB 

" 50 Characters" 



Controller Component 
Configuration ZZ 



Primary-Language 
Compatibility 



LL, FF 



Secondary-Language LL, GG 
Compatibility 



CONFIG 



Textfile 



"50 Characters" Textfile 



CONFIG 

CONFIG 
Textfile 



Represents the SW Release Level. 
This is used for visual reference 
only. 

Represents the Language Release 
Level. This is used for visual 
reference only 



Product Family, e.g., 1 = Printer E. 
2 = Printer F, etc. 

LL increments when language 

and software items nave changes 

that are not compatible. 

FF increments when there is a 

change to a language item which 

affects the function of the item 

Represents the Language Release 
Level. This is used for visual 
reference only. 



Product Family, e.g., 1 = Printer E t 
2 = Printer F, etc 



Compatibility number for 
Diagnostic Utility Tape 

Represents the Diagnostic 

Utility Tape Release Level. This is 

used for visual reference only. 



PVRootPage Product Family, e.g., 1 
2 = Printer F, etc. 



Printer E, 



Textfile LL increments when language 

and software items have changes 
that are not compatible. 
FF increments when there is a 
change to a language item which 
affects the function of the item. 

Textfile LL increments when language 

and software items have changes 
that are not compatible. 
GG increments when there is a 
change to the Secondary language 
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SW-Dtag Utility BB 
Tape Compatibility 



item which affects the function of 
the item. 

PVRootPage Compatibility number for 
Diagnostic Utility Tape 



10 



15 



Product SW Feature " 50 Characters" Textf ile 
Level 



Primary Language 
Feature Level 



"50 Characters" Textf ile 



Secondary Language " 50 Characters" Textfile 
Feature Level 



Represents the SW Release Level. 
This is used for visual reference 
only. 

Represents the Primary 
Language Release Level. 

Represents the Secondary 
Language Release Level. 



In Table I, control data fields are identified for respective software, language, diagnostic and controller 
20 components in the document production facility. Configuration management control data fields for software 
applications include a configuration field 22, identifying compatibility of the software with a family of products. 
In this example, this configuration field specifies a code indicating whether a software application is "config- 
ured" to interface with a given hardware component {e.g., a particular printer, scanner or user interface). 
Similarly, a concatenated SW-Language Compatibility control fields LL, FF contain encoded data indicat- 
25 ing whether either a modified designated user language or software application are incompatible. Specifically, 
data field LL, when incremented, identifies an incompatibility between a modified software item and system 
language. FF, like LL, when incremented, indicates that a modification to a designated user language is no 
longer compatible with a software component in the current configuration. 

A third control field, SW-Diag Utility Tape Compatibility identifies a specific utility tape which is compatible 
30 with the specific modified software. The remaining two data fields store text information used for visual ref- 
erence to a particular software tape. 

Control data fields exist for other system components as illustrated in Table I. However, the number and 
types of fields may vary, depending upon the number of relationships, inter-relationships and information re- 
quired about these relationships or inter-relationships to ensure and maintain integrity of a current conf igura- 
35 tion. 

Once the control fields (relationships) are identified to the system and a current configuration of the docu- 
ment production system established, ongoing maintenance of any potential system configuration occurs at pre- 
determined processing points. 

Fig. 4 illustrates a configuration management data flow for a full software application upgrade to the docu- 

40 ment production system. An upgrade may enhance current application functionality or correct deficiencies un- 
detected in a prior software version. The CM application governs data flow through the system. From the tapes 
SWLabel, PrimaryLabel, PrimaryLangVersion and HWConf iguration, control data fields 22, LL and FF and 
other relevant configuration textual data are retrieved from the text files . This data will be used to subsequently 
verify the integrity and ensure compatibility of the "upgraded" current system configuration. Hardware conf ig- 

45 uration information, read from system data stores, is provided to the CM application for interpretation. 

Upon analysis of the control data retrieved from application files or read from system data stores, the CM 
application instructs install File to load the software files from tape I to internal fixed storage (disk) on the CPU 
A. Simultaneously, installFile updates permanent system files with current configuration control data. A full 
software upgrade is completed and the integrity of the system is ensured. Upon successful completion of the 

50 full software upgrade, the system software label is updated (via SWLabels) and status information, reporting 
on the integrity of the upgraded current conf iguration, is provided to users through the system application Di- 
alog (Fig. 4). 

Example 2 

55 

This example utilizes the functionality of a configuration management system in Example 1 for a partial 
software upgrade, i.e., only preselected, modified software files are loaded onto the system. Fig. 5 represents 
a data flow diagram for configuration management of a system partial software upgrade. The sequential data 
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flow of this functional operation corresponds to the data flow for a full software upgrade, with one exception. 
The process distinctions between a partial and full upgrade reside in the final configuration management proc- 
essing. In a partial software upgrade, SWLabels, identifying the software resident in the current configuration, 
is not read by CM for display to Dialog. No change to the system configuration requiring user notification occurs. 

5 

Example 3 

Figs. 6 and 7 illustrate a high-level process flow diagram and a data flow diagram for a language upgrade 
to the document production facility described in Example 1. Fig. 6 shows configuration data (ZZ, BB, LL FF 

10 and text, identifying configuration relationships and inter-relationships) from PROMS, tape configuration and 
tape and disk application and data files Text (Tape Text and Disk Text). This data is processed by the Real 
Time Operating System (RTOS) t 201, which in turn sends data to the CM application, 200. Upon completion 
of a language upgrade, CM delivers diagnostic information to Dialog and configuration data back to RTOS for 
system update (full language upgrade). 

is Fig. 7 is a detailed data flow diagram for CM application when performing a language upgrade to the docu- 
ment production system. As in Examples 1 and 2, control field data for the upgraded language is retrieved from 
LanguageLabel and LanguageVersion. Current component configuration control data ZZ is read from system 
data stores in HW Configuration from PV Root Page, and Primary and Secondary version from CPU disk stor- 
age. PV Root Page and current configuration language label and version control data (Language Label, LL 

20 and FF) are read from system storage data files on CPU A. This information is then used to determine subse- 
quent upgrade processing. Upon confirmation that current configuration data and upgrade label and version 
data are consistent and the configuration integrity validated, installFile transfers language files from tape to 
system disk storage, and updates current system version and label configuration data files on CPU A. Current 
configuration control version and label data is transferred to CM which provides diagnostic information to Di- 

25 alog for interactive user viewing. 



Claims 

30 1. A process for managing a configuration and ensuring compatibility of components in a computing system, 
including 

defining components of the system; 

identifying relationships between at least two computing system components; 
determining inter-relationships between at least two relationships; 
35 validating integrity of at least one of the relationship and inter-relationship; 

obtaining a validating result; and 

based on the validating result, maintaining integrity of the relationship and inter-relationship, thus 
ensuring compatibility of the system components. 

40 2. A process according to claim 1 , wherein the validating result indicates that the integrity of the at least one 
relationship or inter-relationship no longer exists and the step of maintaining integrity comprises a step 
of taking corrective action to re-establish a lost integrity. 

3. A process according to claim 1 or claim 2, wherein the system components comprise at least one of hard- 
45 ware, software applications and software languages. 

4. A process according to claim 1 or claim 2, wherein the step of maintaining integrity comprises a step of 
writing data to a computer log for subsequent use in the step of validating integrity. 

A process for eliminating incompatibilities between resident software in an automated computer system 
and migrational software, comprising the steps of: 

defining resident software and migrational software used in the automated computer system; 
identifying compatibility relationships between a first resident software and at least one of a sec- 
ond resident software and the migrational software; 

determining compatibility inter-relationships between at least one first compatibility relationship 
and a previously defined second compatibility relationship or a component; 

assigning a dedicated control field to each compatibility inter-relationship or compatibility inter- re- 
lationship; 

10 



50 



55 



EP 0 632 371 A1 



storing said dedicated control field for subsequent retrieval; 

prior to performing a computer operation, validating integrity of the computer system by identifying 
incompatibilities; and 

subsequent to validating integrity and performing a computer operation, ensuring integrity of the 
5 computer system by eliminating incompatibilities. 

6. A process according to claim 5 t wherein the step of validating integrity comprises the steps of: 

reading migrational software and resident software identification data; and 
verifying compatibility between resident software and migrational software by comparing identi- 
10 f ication data against the corresponding dedicated control field. 

7. A process according to claim 5 or claim 6, wherein the computer operation is at least one of an installation 
of migrational software or an upgrade or downgrade to resident software. 

15 8. A process according to any one of claims 5 to 7, further comprising the step of revalidating integrity of 
the computer system subsequent to performing a computer operation. 

9. A process according to any one of claims 5 to 8, further comprising the step of restoring the resident soft- 
ware on the automated computer system to a pre-operation configuration in response to an identified in- 
compatibility. 

1 0. A process for managing a configuration and ensuring compatibility of components in a computing system, 
comprising the steps of: 

identifying components of he system; 

identifying an initial configuration of the components by identifying at least a first relationship be- 
25 tween at least a first relationship between at least a first pair of said components and a second relationship 

between at least a second pair of said components; 

identifying at least one inter-relationship between said at least first relationship and said second 
relationship; 

periodically sampling a current configuration of said components; 
30 comparing said current configuration to said initial configuration to obtain a validity result; 

indicating one of a compatibility state and an incompatibility state based on said validating result; 

and 

taking corrective action when said indicating step indicates said incompatibility state and recording 
as said initial configuration said current configuration when said indicating step indicates said compati- 
35 bility state. 

11. A process for eliminating incompatibilities between resident software and migrational software in an au- 
tomated computer system, comprising the steps of: 

identifying resident software and migrational software used in the automated computer system; 
40 identifying compatibility relationships between a first resident software and at least one of a sec- 

ond resident software and the migrational software; 

identifying compatibility inter-relationships between at least one of said compatibility relationships 
and at least one of another of said compatibility relationships, a previously defined second compatibility 
relationship and a component; 
45 assigning a dedicated control field at at least one of each of said compatibility relationships and 

said compatibility inter-relationships; 

storing each of said dedicated control fields for subsequent retrieval; 
periodically sampling current configurations of said relationships and inter-relationships; 
comparing said current configurations to said dedicated control fields; and 
M taking corrective action when said comparing step indicates inconsistencies in compatibility and 

recording said dedicated control fields as said current configurations when said comparing step indicates 
consistency in compatibility. 
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